Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
File: MenbQitjczJSiuYo2dpQ5AOX-2Q.mft (raw, json)
Hash identifier: mSHh4wBHwVyokkqLz99wj4BkLGeTD0OSvfu52T+/g38=
Subject key identifier: EF:29:C2:CE:B3:60:2F:D1:6A:66:06:7F:A3:F5:7B:9A:CF:20:32:C5
Authority key identifier: 31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
Certificate issuer: /CN=31e9db422b637332528ae628d9da50e40397fb64
Certificate serial: 019A7226532736C41A982045F1B9FD69EDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
Manifest number: 032D
Signing time: Tue 11 Nov 2025 09:01:45 +0000
Manifest this update: Tue 11 Nov 2025 09:01:45 +0000
Manifest next update: Wed 12 Nov 2025 09:01:45 +0000
Files and hashes: 1: MenbQitjczJSiuYo2dpQ5AOX-2Q.crl (hash: nUfYz1/sf3RIlHX8PnqNsSSf2NKueGrP1sY1XaA5UOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:53:27:36:c4:1a:98:20:45:f1:b9:fd:69:ed:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31e9db422b637332528ae628d9da50e40397fb64
Validity
Not Before: Nov 11 09:01:45 2025 GMT
Not After : Nov 12 09:01:45 2025 GMT
Subject: CN=ef29c2ceb3602fd16a66067fa3f57b9acf2032c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0c:6c:15:43:16:26:63:23:33:2d:7e:91:e5:
a0:55:20:df:6f:07:92:80:75:b8:6a:88:bc:f2:6a:
3b:00:08:df:57:e0:e8:72:3d:29:15:7c:27:85:61:
84:e7:02:d2:43:9a:c9:4f:97:8d:25:1f:d4:6d:8e:
b2:ce:14:9c:2a:8a:47:3c:c1:92:5b:92:bf:28:b9:
b3:fd:8e:10:40:57:fb:86:19:c6:45:08:3d:4f:32:
c0:4f:cb:ec:50:38:dd:17:ee:e9:d1:ef:bc:ae:44:
93:93:04:6c:37:ee:f4:d3:8f:6d:f6:18:bc:57:9d:
5b:13:7f:b7:14:d3:26:a6:8c:c2:2a:dc:60:dc:d2:
f2:1f:b6:8d:72:66:22:ac:58:84:bc:60:d8:30:b1:
df:51:e6:7c:d0:e7:b7:38:0f:ff:6d:f5:bf:f7:d4:
a6:1d:ef:82:4b:70:c1:87:2a:98:45:6b:27:02:d9:
d5:f1:48:c2:3c:a4:cf:ea:d7:ba:21:a5:cd:72:e7:
60:6a:4f:90:e8:fc:d8:4f:bb:42:6f:10:7e:90:b4:
4e:b6:84:c4:2a:6a:f0:df:b2:cc:c4:19:fa:b7:e3:
27:ee:40:db:2d:5e:7a:c5:fc:ea:b5:c3:f8:e3:b2:
d9:bb:4e:26:c8:84:69:92:8f:cd:d4:44:b3:ad:b8:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:29:C2:CE:B3:60:2F:D1:6A:66:06:7F:A3:F5:7B:9A:CF:20:32:C5
X509v3 Authority Key Identifier:
keyid:31:E9:DB:42:2B:63:73:32:52:8A:E6:28:D9:DA:50:E4:03:97:FB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MenbQitjczJSiuYo2dpQ5AOX-2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/34995f-8a45-45fb-81f2-2001779926cf/1/MenbQitjczJSiuYo2dpQ5AOX-2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8a:93:c1:eb:72:5b:cb:17:85:2b:df:f5:d7:8a:7b:f6:2d:
02:c7:45:ff:2e:ab:c9:36:64:2f:5f:71:98:48:9b:f3:f0:8c:
32:7f:8f:6e:6f:cd:dc:40:65:3e:7b:0b:02:9e:22:35:9a:fc:
04:a9:18:a4:fe:7f:15:a4:6c:a0:ed:63:3d:6d:0a:bf:c8:94:
cb:34:9c:ef:25:02:84:01:16:55:83:06:52:bd:5d:e9:8e:a6:
9c:49:96:36:71:c3:d4:cf:78:8d:83:90:6e:4c:73:0b:ed:59:
a3:63:64:72:90:51:a8:8d:16:d0:95:76:67:77:09:f7:82:f9:
a0:d3:a9:e5:38:e5:e6:56:db:ec:7b:e8:25:dd:1d:94:30:5b:
bc:2b:be:8f:d1:95:93:9e:51:be:a4:ad:d0:ff:25:d9:d2:40:
20:8f:b8:a8:2d:19:44:6e:8a:21:e3:e1:80:ad:35:78:b8:5b:
20:64:65:c5:85:d2:53:74:a5:12:e7:2c:4b:ce:39:72:76:5b:
62:00:69:a5:a3:c8:d1:d2:01:32:26:7a:f1:6c:57:bc:a1:bd:
81:80:50:94:a2:35:71:74:c5:46:e5:55:12:85:57:20:84:58:
c0:7d:24:98:9c:08:9d:37:e2:21:14:92:64:f1:ac:2f:a0:21:
cb:5b:9f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyJlMnNsQamCBF8bn9ae2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZTlkYjQyMmI2MzczMzI1MjhhZTYyOGQ5ZGE1MGU0MDM5
N2ZiNjQwHhcNMjUxMTExMDkwMTQ1WhcNMjUxMTEyMDkwMTQ1WjAzMTEwLwYDVQQD
EyhlZjI5YzJjZWIzNjAyZmQxNmE2NjA2N2ZhM2Y1N2I5YWNmMjAzMmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AxsFUMWJmMjMy1+keWgVSDfbweS
gHW4aoi88mo7AAjfV+Docj0pFXwnhWGE5wLSQ5rJT5eNJR/UbY6yzhScKopHPMGS
W5K/KLmz/Y4QQFf7hhnGRQg9TzLAT8vsUDjdF+7p0e+8rkSTkwRsN+70049t9hi8
V51bE3+3FNMmpozCKtxg3NLyH7aNcmYirFiEvGDYMLHfUeZ80Oe3OA//bfW/99Sm
He+CS3DBhyqYRWsnAtnV8UjCPKTP6te6IaXNcudgak+Q6PzYT7tCbxB+kLROtoTE
Kmrw37LMxBn6t+Mn7kDbLV56xfzqtcP447LZu04myIRpko/N1ESzrbgaiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8pws6zYC/RamYGf6P1e5rPIDLFMB8GA1UdIwQY
MBaAFDHp20IrY3MyUormKNnaUOQDl/tkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjIt
MjAwMTc3OTkyNmNmLzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8zNDk5NWYtOGE0NS00NWZiLTgxZjItMjAwMTc3OTkyNmNm
LzEvTWVuYlFpdGpjekpTaXVZbzJkcFE1QU9YLTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYqTwety
W8sXhSvf9deKe/YtAsdF/y6ryTZkL19xmEib8/CMMn+Pbm/N3EBlPnsLAp4iNZr8
BKkYpP5/FaRsoO1jPW0Kv8iUyzSc7yUChAEWVYMGUr1d6Y6mnEmWNnHD1M94jYOQ
bkxzC+1Zo2NkcpBRqI0W0JV2Z3cJ94L5oNOp5Tjl5lbb7HvoJd0dlDBbvCu+j9GV
k55RvqSt0P8l2dJAII+4qC0ZRG6KIePhgK01eLhbIGRlxYXSU3SlEucsS845cnZb
YgBppaPI0dIBMiZ68WxXvKG9gYBQlKI1cXTFRuVVEoVXIIRYwH0kmJwInTfiIRSS
ZPGsL6Ahy1ufyQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:00 2025 by rpki-client